Privacy Policy

Introduction

We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains what information we collect when you use the CrazyTower Casino website and services, how we use it, who we share it with, and the choices you have.

Scope and Controller

This policy applies to personal data we collect through our website, account registration, customer support, and related services. We are the data controller for the processing described here and are responsible for ensuring your data is handled in accordance with applicable data protection laws, including the GDPR where it applies.

Personal Data We Collect

We collect information that is necessary to provide our services and to meet legal and security obligations. Types of data we process include:

Account information: email address, username, password, date of birth, and other basic profile details you provide when you register.
Identity and verification data: identity documents or proofs you submit for verification, plus any data produced during identity checks.
Contact information: email address and telephone number you provide for communications and support.
Technical and device data: IP address, browser type and version, device identifiers, operating system, and other diagnostic data collected automatically to help operate and secure the service.
Usage and activity data: actions on the site, session history, preferences, and settings that help us administer accounts and personalise features.
Communications data: records of interactions with our support team, chat logs, emails, and any other correspondence you send us.
Marketing and preferences: your choices about receiving promotional messages and the channels you prefer.

How We Use Your Personal Data

We use personal data for clear, specific purposes aligned with providing and improving our services:

To create and manage your account, including identity verification and enabling access to the site.
To deliver customer support, respond to inquiries, and resolve disputes.
To maintain security, detect and prevent fraud, abuse, and other prohibited activity.
To personalise the user experience, improve our services, and perform analytics and testing.
To send service messages and, with consent where required, promotional communications.
To comply with legal obligations and regulatory requests where applicable.

Legal Basis for Processing (where GDPR applies)

When the GDPR applies to you, we rely on one or more of the following legal bases:

Contract performance: processing necessary to provide our services and manage your account.
Legal obligation: processing required to comply with laws or regulatory requirements.
Legitimate interests: for fraud prevention, security, service improvement, and certain communications where these interests are not overridden by your rights.
Consent: when you give clear permission for a specific purpose, for example receiving marketing messages. You may withdraw consent at any time.

Cookies and Similar Technologies

We use cookies and similar technologies to operate our site, remember preferences, measure performance, and personalise content. Categories include:

Essential cookies: required for basic site functions and account access.
Performance and analytics: help us understand how the site is used and improve it.
Functionality cookies: remember your settings and preferences.
Advertising and third-party cookies: may be used to show relevant content and measure campaign effectiveness where applicable.

You can manage or delete cookies through your browser settings. Disabling certain cookies may affect site functionality.

Sharing and Disclosure

We share personal data only where necessary and with appropriate protections in place:

Service providers and processors: third parties who perform services on our behalf, such as technical hosting, identity verification providers, and customer support platforms.
Legal and regulatory authorities: when required by law, regulation, court order, or to respond to lawful requests from public authorities.
Fraud prevention and safety partners: where necessary to detect or prevent suspicious or illegal activity.
Affiliated entities: where sharing is necessary for operations and where appropriate safeguards are applied.

We do not sell your personal data for third-party marketing. Any sharing is limited to what is necessary and subject to confidentiality and security controls.

International Data Transfers

Personal data may be processed or stored outside your country. When we transfer data internationally, we apply safeguards such as adequacy decisions, standard contractual clauses, or other lawful mechanisms to protect your information.

Data Retention

We retain personal data only for as long as necessary for the purposes described above, including to meet legal and regulatory obligations, resolve disputes, and enforce agreements. Retention periods may vary depending on the type of data and applicable law. After data is no longer needed, we will securely delete or anonymise it.

Your Rights

If you are covered by the GDPR or similar laws, you have rights regarding your personal data. These include the right to:

Request access to the personal data we hold about you.
Ask us to correct inaccurate or incomplete data.
Request erasure of your personal data in certain circumstances.
Request restriction of processing or object to processing based on our legitimate interests.
Receive a copy of your personal data in a portable, commonly used format (data portability) where applicable.
Withdraw consent where processing is based on consent.

To exercise any right, contact us. We will respond within applicable legal timeframes. You may also lodge a complaint with a supervisory authority if you believe your rights have been breached.

Security

We implement technical and organisational measures to protect personal data against unauthorised access, loss, or misuse. Measures include encryption, access controls, secure infrastructure, and regular staff training. While we aim to protect your data, no system is completely secure; if a security incident affects your personal data, we will take steps required by law to investigate and notify you where necessary.

Automated Decision-Making and Profiling

We may use automated processes to support account risk scoring, fraud detection, and to personalise your experience. Where such processing produces legal effects or significantly affects you, you have the right to request human review, to express your point of view, and to obtain an explanation of the decision-making process where required by law.

Children's Privacy

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have collected personal data from a child without appropriate consent, we will take steps to delete that data.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make material changes, we will post the updated policy on this page and, where required, notify you by email or through the service.